Allow codecov upload with token on PRs from forks

[adrinjalali]

From v4, this action switches to tokenless upload when PRs are from forks (which is the case for ALL PRs I have in ALL projects I work in), and it means it fails due to the github limit.

For projects which don't care about exposing the token in plain text in the configuration (which is the case in many projects since it's a low risk token anyway), this action should allow users to use tokens in PRs from forks. This can be done with an explicit parameter maybe, but it should be allowed.

[MetRonnie]

Workflows running on the pull_request event from forks do not have access to repository secrets.

Is it not possible to just add the token in plaintext to the workflow YAML?

- uses: codecov/codecov-action@v4
  with:
    token: a1b2c3d4...

It's getting to the point where I am considering doing this, as we are getting

Tokenless has reached GitHub rate limit

extremely often nowadays.

[adrinjalali]

@MetRonnie that's what we had in our repo. But v4 of this action now ignores that given token.

[thomasrockhu-codecov]

@adrinjalali @MetRonnie we released a new version of the CLI/Action that should make this work now. I'm going to close for now, but if it's still a problem, please re-open/comment.